atlas
← back

privacy policy

Effective: 10 May 2026 · v0.1

What we collect

Account data: your email address, an Atlas username (auto-derived from your email or GitHub login), an optional display name, avatar URL, and bio.

Submissions: ideas, pitches, bodies, tags, comments, and claims you create. Source-chat transcripts you attach to ideas are stored privately by default and shown only to you unless you opt to publish them.

Authentication: sign-in events and OAuth tokens (stored hashed). Personal access tokens (PATs) are also stored as SHA-256 hashes — Atlas cannot recover the original token.

MCP audit log: every call your AI client makes against the MCP server is logged with the tool name, arguments, duration, and status. Only you can see your own audit log.

Analytics: page views, clicks, and product events via PostHog. We do not collect IP addresses or precise location.

Subprocessors and where data goes

  • Supabase (Postgres, Auth, Storage) — your account, submissions, and tokens.
  • Vercel (web hosting) — request logs.
  • Google AI Studio (Gemini)— text you submit is sent to Gemini for the auto-summary step. Per Google’s policy on the free tier, prompts may be used to improve their models unless you upgrade to a paid Cloud project.
  • Voyage AI— text is sent for embedding so we can do semantic search. Voyage’s policy states they do not train on customer data by default.
  • PostHog — anonymous-ish product analytics. Your user id is hashed before being sent.

What we never do

  • Sell your data to anyone.
  • Use your private source chats for any purpose besides showing them to you.
  • Send marketing emails (we don’t even have a mailing list yet).

Cookies

Atlas uses one functional cookie set: the Supabase session cookies that keep you signed in. No advertising or cross-site cookies.

Your rights

You can edit your profile in /settings. You can withdraw any idea you authored (which sets its status to archived; embeddings are deleted on cascade). To delete your entire account, open an issue at github.com/MauryaHG/atlas and we will purge within 30 days.

Where Atlas runs

Web: Vercel global edge network. Database: Supabase, Singapore region. AI calls: Google AI Studio (US) and Voyage AI (US). If data residency matters to you, do not use Atlas yet — we plan region selection in a future version.

Children

Atlas is not directed at children under 13 and we do not knowingly collect data from them.

Contact

Privacy questions, deletion requests, or anything else: open an issue at github.com/MauryaHG/atlas.